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Abstract. The characterisation of termination using well-founded monotone algebras has 
been a milestone on the way to automated termination techniques, of which we have seen 
an extensive development over the past years. Both the semantic characterisation and 
most known termination methods are concerned with global termination, uniformly of all 
the terms of a term rewriting system (TRS). In this paper we consider local termination, 
of specific sets of terms within a given TRS. 

The principal goal of this paper is generalising the semantic characterisation of global 
termination to local termination. This is made possible by admitting the well-founded 
monotone algebras to be partial. We also extend our approach to local relative termination. 

The interest in local termination naturally arises in program verification, where one is 
probably interested only in sensible inputs, or just wants to characterise the set of inputs 
for which a program terminates. Local termination will be also be of interest when dealing 
with a specific class of terms within a TRS that is known to be non-terminating, such as 
combinatory logic (CL) or a TRS encoding recursive program schemes or Turing machines. 

We show how some of the well-known techniques for proving global termination, such 
as stepwise removal of rewrite rules and semantic labelling, can be adapted to the local 
case. We also describe transformations reducing local to global termination problems. 
The resulting techniques for proving local termination have in some cases already been 
automated. 

One of our applications concerns the characterisation of the terminating S-terms in 
CL as regular language. Previously this language had already been found via a tedious 
analysis of the reduction behaviour of S-terms. These findings have now been vindicated 
by a fully automated and verified proof. 



An important contribution to the development of automated methods for proving termina- 
tion has turned out to be the characterization of termination using well-founded monotone 
algebras. Both the semantic characterization and most known termination methods are 
concerned with global termination, uniformly of all the terms of a TRS. This is remarkable, 
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as termination is prima facie a property of individual terms. More generally, one may con- 
sider the termination problem for an arbitrary set of terms of a TRS. We call this the local 
termination problem. 

A typical area where termination techniques are applied is that of program verification. 
The termination problems naturally arising in program verification are local termination 
problems: the central interest is termination of a program when started on a valid input. 
A simple example of a program that is not globally terminating is the factorial function: 

/ac(0) = 1 

fac{n) = n ■ fac{n — 1) 

This function terminates for all integers n > 0. However, when started on a negative number 
this function is caught in an infinite recursion. (This program will be used as an illustration 
in Examples 13.81 and 15.31 ) 

In logic programming (e.g. Prolog), local termination has been a central field of research 
over the past years. Local termination problems of Haskell programs have been considered 
in |PSS97] and |GSTSK06] . In |PSS97j . a tableau calculus is devised to show termination 
of sets of terms of the form f ai ... a„ where the Oj's are in normal form. In |GSTSK06] . 
a transformation from Haskell programs into dependency pair problems [AGOOj is given, 
which then in turn are solved using methods for global termination. 

Surprisingly, for TRSs not much work is known about local termination. We mention 
the method of match-bounded string rewriting |GHW04] . which can be used to prove local 
termination for sets of strings generated by a regular automaton. Indeed, this method can 
be viewed as an instance of the semantic framework we develop in this paper. 

Local termination is of special interest when dealing with specific classes of terms within 
a TRS that is known to be non-terminating. Examples of such TRSs are combinatory logic 
(CL) |Cur30j and encodings of recursive program schemes or Turing machines. The well- 
known halting problem for Turing machines is a local termination problem. Clearly, this 
holds for the blank tape halting problem which just asks for termination on the blank tape. 
On the first glance the uniform halting problem - asking for termination on all inputs - 
might seem to be global. However, this is a local termination problem as well, since Turing 
machines are started in a distinguished initial state and admit only one head to work on 
the tape. In this paper we will use CL and the halting problem for Turing machines to 
illustrate some of our results (Examples 13.71 16.51 17. 9|, 17.101 19.61 and 19. 7p . 

Outline and Contribution. In Section [3] we generalize the semantic characterization 
from global termination to local termination based on well-founded, monotone partial S- 
algebras. This establishes a first, important step towards the development of automatable 
techniques for proving local termination. In Section|3]we extend this to relative termination, 
obtaining a characterization using extended monotone partial S-algebras. 

For global termination it is common practice to stepwise simplify the proof obligation 
by removing rules. For local termination (the strictly decreasing) rules cannot simply be 
removed as they influence the set of reachable terms. We need to impose weak conditions 
on the 'removed' rules, see Section [5l 

Having developed the general framework, in the remaining sections we look for fruitful 
instances of partial monotone algebras, suitable for automation. 

In Section [6] we consider the case that the family of the set of terms for which we want 
to prove local termination can be described by a partial model. A variant of semantic 
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labeling |Zan95] can then be used to transform the local termination problem into a global 
termination problem, and the available provers for global termination can be applied. 

In Section [7] we consider TRSs with the property that strong and weak normalization 
coincide. In particular, this holds for orthogonal, non-erasing TRSs. In case the language 
of normalizing terms happens to be regular, we show how a tree automaton (partial model) 
can be found accepting exactly the normalizing terms. Then we label the TRS with the 
obtained partial model, and employ the theory developed in Section[6]to transform the local 
termination problem for the set of normalizing terms to global termination of the labeled 
TRS. We automated the search for the tree automaton as well as the labeling. 

We apply this method to two well-known combinators from CL: S and 5 with the rewrite 
rules Sxyz xz{yz) and S xy ^ y{xy), respectively. Determining the language of nor- 
malizing S-terms has been open until the year 2000 [WalOOj . Using the method from Sec- 
tion[7]we can now automatically find the partial model for N, and we obtain a labeled system 
whose global termination coincides with local termination on N. Global termination of this 
labeled system (containing 1800 labeled rules) has been proven by TTT2 (1.0) |KSZM09] 
and the proof has been verified by CeTA (1.05) [TS09] . 

In Section [8] we demonstrate that the local termination method proposed in Section [6] 
can also be applied for proving global termination. To that end, we transform the global 
termination into local termination for the set of right-hand sides of forward closures [DerBlj . 
Then we transform the obtained system back into a global termination problem using the 
transformation from Section [6l We show the applicability of this method by solving an 
example that remained unsolved in the last termination competition |Ter08j . After the 
transformation, the system allows for a simple termination proof using linear polynomial 
interpretations . 

In Section [9] we combine the partial variant of the quasi-models of |Zan95j with mono- 
tone algebras to obtain partial monotone algebras. Roughly speaking, partial quasi-models 
are deterministic tree automata |CDG"'"07j equipped with a relation > on the states which 
guarantees that the language of the automaton is closed under rewriting. Thereby we 
obtain partial monotone algebras that can be applied successfully for proofs of local termi- 
nation. Indeed, this method can be automated and, as a matter of fact, we have devised 
an implementation. 

A preliminary version of this paper has appeared in [EdVWO^ ; our additional contri- 
bution is as follows: 

• For TRSs where strong and weak normalization coincide and where the language of nor- 
malizing terms N is regular, we describe an algorithm for constructing a tree automaton (a 
partial model) accepting exactly the language N. For example, this method is applicable 
for (fully automatically) determining the language of normalizing S-terms. 

• We show that methods for local termination can fruitfully be employed for proving global 
termination, classically the main focus of termination analysis for TRSs. Employing the 
RFC method (right-hand sides of forward closures) in combination with the transforma- 
tion from local to global termination from Section [H we give a new proof for a string 
rewrite system (SRS) for which no proof had been found in the termination competition 
so far. 
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2. Preliminaries 

Term rewriting. A signature S is a non-empty set of symbols, each having a fixed arity, 
given by a map (t : S ^ N. Let S be a signature and X a set of variable symbols. The 
set Ter(Y,,X) of terms over S and X is the smallest set satisfying: X C Ter(S,,^), and 
/(ti, . . . , t„,) G Ter(i;, A") if / G S with arity n and Vi(l < i < n) : ti £ Ter(i;, X). We use 
x,y,z, . . . to range over variables. The set of positions Vos{t) C N* of a term t G Ter(S, X) 
is defined as follows: Vos{f{ti, . . . ,tn)) = {-L} U {ip | 1 < i < tt(/)i P S Vos(ti)} and 
Pos(x) = {_L} for variables x & X. 

A substitution cr is a map a : X Ter{T,, X). For a term t G Ter(S,^) we define ta 
as the result of replacing each x X in t hy a{x). Formally, ta is inductively defined by 
xa = (t(x) for variables x G X and otherwise f{ti, . . . ,tn)o' = f{tia, . . . ,tncr). Let [] be a 
fresh symbol, [] S U <Y. A context C is a term from Ter(S, X U {[]}) containing precisely 
one occurrence of []. By C[s] we denote the term Ca where (t{[]) = s and cr{x) = x for all 
X £ X. 

A term rewriting system (TRS) R over S and ^ is a set of pairs r) G Ter(S,<%'), 
called rewrite rules and written as £ — ?• r, for which the left-hand side £ is not a variable 
{i ^ X), and all variables in the right-hand side r occur in i as well ( Var(r) C Var{i)). Let 
ii be a TRS. For terms s,t € Ter(S, X) we write s -^r t (or briefiy s ^ t) there exists a 
rule i ^ r G R, a substitution a and a context C G Ter(S, <YU{[]}) such that s = C[ia] and 
t = C[ra]. The reflexive-transitive closure of — >■ is denoted by — ». We call — > the one-step 
rewrite relation induced by R and the many-step rewrite or reduction relation. If t — » 
then we call t' an (R)-reduct of t. 

Definition 2.1. Let i? be a TRS over S and T C Ter(S, A") a set of terms. The family 
Fampt{T) of T is the set of (not necessarily proper) subterms of i?-reducts of terms t 
(that is, the least set containing t that is closed under reduction and taking subterms). 

Partial functions. For partial functions / : x . . . x A and ai G Ai, . . . , a„ G An 

we call /(ai, . . . , an) defined and write /(oi, . . . , an)| whenever (ai, . . . , o^) is in the domain 
of /. Otherwise /(ai,...,a„) is called undefined and we write /(ai, . . . , a.„)|. We use 
the same terminology and notation for composite expressions involving partial functions. 
Between such expression we use Kleene equality: 

expi ~ exp2 -^^def. (expit and ^XP2'\) or {expi\, and expai aiid expj = expg) 
Note that an expression can only be defined if all its subexpressions are. 

Definition 2.2. Let ^4 be a set and R a relation on A. We define two properties of an 
n-ary partial function / with respect to R. 

(1) / is closed if for every a, 6 G >1 we have: 

/(..., a,. ..)! & aRb => /(..., 6,. ..)! 

(2) / is monotone if for every a, 6 G j4 we have: 

/(..., a,. ..)! & /(..., 6,. ..)! & ai?6 ^ /(..., a,... )i? /(..., 6,...) 
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The functions that we consider wiU be typically both closed and monotone, which can 
be rendered briefly as: 

/(..., a,. & aRb ^ fi...,a,...)R /{..., b,...) 

By writing something like expi R exp2 we imply that expi and exp2 are defined. 

Partial S-algebras. We give the definition of a partial algebra: 

Definition 2.3. A partial T,-algebra {A, | • ]) consists of a non-empty set A and for each 
n-ary / G S a partial function |/] : A^ A, the interpretation of f. A "L-algehra {A, [ • ]) 
is a partial S-algebra (A, | • ]) where all interpretations [/] for / G S are total. 

Given a partial S-algebra A = {A, [ ■ 1) and a (partial) assignment of the variables, 
a : X ^ A, we can give an interpretation \t, a] of terms t € Ter(S, X), which, however, will 
not always be defined. So the interpretation is a partial function from terms and partial 
assignments to A, inductively defined by: 

[x, a\ = a{x) 

I/(ti,...,t„),al = [/l([ti,al,...,[t„,al) 

For ground terms t € Ter(S, 0) we write [i] for short. 

Whenever a term t is defined, that is, then all subterms of t are defined as 

well. This is a consequence of the usual definition of the composition of partial functions 
(functional relations); 'undefined' is not an element of the domain. We say that a set of 
terms T is defined if all terms in T are defined: 

Definition 2.4. A set T C Ter(i;, 0) is called defined if for ah t G T we have |t] j. 

Partial models. First, we generalise the models from |Zan95j to partial models. 

Definition 2.5. A model for a TRS i? is a S-algebra (A, [ • ]) such that a] = [r, a\ for 
every rule i r £ R and every interpretation a : Var{i) ^ ^ of the variables. 

Definition 2.6. Let i? be a TRS over S. A partial model A = {A, [ ■ ]) for R is a partial 
S-algebra A, such that 

ie,aj[ l£,a} = lr,a} 

for every £ ^ r £ R and a : Var{£) — > A. 

Thus the condition a] = |r, a] of models is only required if the interpretation of the 
left-hand side is defined, that is, p, a]|. Observe that a left-hand side £ may be undefined 
while the corresponding right-hand side r is defined; the other way around is not permitted. 
This asymmetry is crucial, since rewriting may turn an undefined (non-terminating) term 
into a defined (terminating) term, but not the other way around. 

Definition 2.7. Let A = {A, | • ]) be a partial model. The language C{A) of A is: 

C{A) = {t€Jer{E,0) \ Mj} 

We further generalise the concept of partial models to relations: 
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Definition 2.8. Let i?be aTRS over T,, A= {A, [•]) be a partial S-algebra, and Q AxA 
a binary relation. We say that {A, [•],>-) is a partial model for R if: 

for all ^ ^ r € i? and every assignment a : Var{i) — > A. If additionally {A, | • ]) is a (total) 
S-algebra, then {A, | • ], ^) is called a model for R. Whenever the partial S-algebra A is 
clear from the context, we say V is a partial model for R' for short. 

Note that {A, [ • ]) is a partial model if and only if {A, | • 1, =) is a partial model. 

Remark 2.9. The notion of partial model {A, | • ], is closely related to that of quasi- 
model |Zan95j . In particular, a quasi- model for a TRS i? is a (total) monotone model 
{A,l-l>) for R. 

Remark 2.10. In Definition 12.61 and 12.81 we could as well quantify over partial assignments 
a : X ^ A in place of total assignment a : X ^ A. This gives rise to an equivalent 
definition as an undefined value for a variable in the left-hand side i (and Var(r) C Var(£)) 
would result in a] being undefined, and thereby invalidate the precondition a]| of 
the implication. 

3. Local Termination 

We devise a complete characterization of local termination based on an extension of the 
monotone algebra approach of |EWZ08l IZan94j . The central idea is the use of monotone 
partial algebras, that is, the operations of the algebras are allowed to be partial functions. 
This idea was introduced in |EGH"'"09] . where these algebras have been employed to ob- 
tain a complete characterization of local infinitary strong normalization. First we give the 
definition of local termination: 

Definition 3.1. Let A be a set and A x A a binary relation on A. Then is called 
terminating on B A ii no b ^ B admits an infinite sequence 

6 = 6i 62 • • • 

Note that h = hi ^ B. The elements 621 • • • 1 however, may or may not be in B. 

Definition 3.2. A TRS R over S is called terminating (or strongly normalizing) on T Q 
Ter(S,^), denoted SN^(T), if -^ji is terminating on T. We write SNr for termination on 
the set of all terms Ter(S, X). 

We introduce the concept of monotone partial S-algebras. In contrast with |EdVW0"9] 
we do not require well-foundedness of >- . We think that it is conceptually cleaner to distin- 
guish the two concepts. Monotone partial S-algebras {A, |-], ^) for which well-foundedness 
of >- holds, will be called well-founded. 

Definition 3.3. A monotone partial Ti-algebra {A, | • ], >-) is a partial S-algebra {A, [ • ]) 
equipped with a binary relation yQ A x A on A such that for every f (zTi the function [/] 
is closed and monotone with respect to >-. 

A monotone partial S-algebra {A, [•],>-) is called well-founded if >- is well-founded. 
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Remark 3.4. One could also work with monotone, total algebras instead of partial algebras, 
by adding an "undefined" element _L to the domain. Then defining _L to be maximal, ± >- a 
for every a & A \ {-L}, monotonicity of a function will automatically entail closedness. In 
order to get full correspondence with our framework of partial algebras, we would in this 
set-up only consider strict functions (that is, the value of the function is _L whenever one of 
the arguments is _L). 

The following theorem gives a complete characterization of local termination in terms 
of monotone partial algebras. 

Theorem 3.5. Let R be a TRS over S, and T C Ter(S,0). Then SNr{T) holds if and 
only if there exists a well-founded monotone partial Ti-algehra A = {A, [ • ], such that T 
is defined, and >- is a partial model for R. 

Proof. Theorem 13.51 is proved in the same way as Theorem 14.61 (using Remark 14. 2p . □ 

To keep the presentation simple, the theorem characterizes local termination for sets 
of ground terms T C Ter(S, 0) only. Indeed, the theorem can easily be generalized to 
sets of open terms by, instead of just a well-founded monotone partial algebra, additionally 
requiring a variable assignment a. A set of terms T is then called defined if for that a we 
have [t, a] I for every t £ T. 

Remark 3.6. In case T = Ter(S, 0) is the set of all ground terms. Theorem 13.51 basi- 
cally coincides with the usual theorem for proving termination using (total) well-founded 
monotone S-algebras. More precisely, the subalgebra of A containing all elements that are 
interpretations of ground terms (leaving out the junk) is a (total) well-founded monotone 
S-algebra proving termination of R. 

Example 3.7. We consider the S combinator with the rewrite rule 

Sxyz — > xz{yz) 

from combinatory logic. That is: 

@(@(@(S, x),y), z) ^ @(@(x, z), ©(y, z)) 

in first order notation. The @(M, N) is abbreviated by MN . 

The S combinator is known to be globally non-terminating. For example the term 
S(SS)(SS)(S(SS)(SS)) admits an infinite reduction, see further jZac78] . We have, however, 
local termination on certain sets of terms, for example the set of "fiat" S-terms: 

T = {S" I n G N, n > 1} 

where 5^ = 5 and S'^+i = @(S", S). 

We prove strong normalization on T using the well-founded monotone partial S-algebra 
A = {A, I • ], ^), where A = {s} U N and the interpretation [ • ] is given by: 

[Sl=s [@l(s,s)=0 I@l(0,n)=n+1 I@l(n, s) = 2 • n + 1 

for all ?i G N and |@](a:,y)'[^ for all other cases. Let >~ be the natural order on N; that is, 
s is neither source nor target of a ;^ step. Then well-foundedness of >- and monotonicity of 
|@] are obvious, and T is defined. We have \Sxyz, a]| only if a{x) = s and a{z) = s; then 
we obtain: 



[Sxyz, a] = 3 :^ 1 = |2;2;(yz),a] for a{y) = s 

{Sxyz, a] = 2 • a{y) 3 ^ 2 • a{y) + 2 = lxz{yz),a\ for a{y) G N 
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Hence is a partial model for Sxyz — )> xz{yz) and we conclude termination on T. 
Example 3.8. We recall the Haskell program from the introduction: 

fac{0) :: Integer — > Integer 

/ac(0) = 1 

/ac(n) = n ■ fac{n — 1) 

We remark that the standard Haskell data type Integer allows for negative numbers. For this 
reason the program is not globally terminating, but only locally on non-negative integers. 
The usual implementation of the factorial function as TRS makes use of Peano numerals for 
encoding natural numbers using a constant '0' and a unary symbol 's' for successor. Then 
the problem of negative numbers does not occur. 

For the purpose of modeling the Haskell program as close as possible, we have chosen 
for a different encoding of the factorial function as TRS. For encoding negative numbers we 
extend Peano numerals with a unary symbol '— '. Since standard term rewriting does not 
allow for a priority order on rules, we need to dissolve ambiguities, that is, overlaps between 
the rules, by instantiating the variables; e.g. for the factorial function fac the variable n 
needs to be instantiated with s(n) and — (n) to match exactly the integers (in this case 0) 
not covered by the first rule. As the result of the translation we obtain the TRS R: 



/ac(0) - 


■>s(0) 


iPi) 


fac{s{x)) - 


-> mul{s{x) , fac{x)) 


iP2) 


fac{-{x)) - 


-> mul{—{x),fac{—{s{x)))) 


iPs) 


mul{x, 0) - 


-> 


{pa) 


mul{0, y) - 


-> 




mul{x, s{y)) - 


-> add{mul{x, y), x) 


(Pe) 


mul{s{x), -{y)) - 


-> — (tou/(s(x), y)) 


iPi) 


mul{-{x), -{y)) - 


-7> mul{x, y) 


iP9) 


add{x, 0) - 


-> X 


(Pio) 


add{0, y) - 


■> y 


iPu) 


add{x, s{y)) - 


-> s{add{x, y)) 


(pu) 


add{s{x),-{s{y))) - 


-> add{x, —{y)) 


(pis) 


add{5{x),-{0)) - 


-> s(x) 


(pu) 


add{-{x), -{y)) - 


-> —{add{x, y)) 


(Pis) 



This TRS is globally non-terminating due to the rewrite sequence: 

fac{-{x)) mul{-{x),fac{-{s{x)))) 

— > TOw/(— (x), muZ(— (x),/ac(— (s(s(x)))))) — > ... 

We prove local termination on the set T = {/ac(s"(0)) | n G N}. Let A = (N, | • ], >) where 
> is the natural order on N, and the interpretation | • ] is given by: 

[0] = [si (n) = n + 1 l/ac] (n) = (2n + 2) ! 

lmul}{n,m) = 2{n + l){m + 1) ladd}{n,m) = n + 2m + 1 |— ](n,m)| 
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for all n,m e N. For all left-hand sides £ of (jgsj), (jprj), (jpgj), (jpTsj), ( j^iij ), ( pisj ) and all 
a : — )> N we have [£, a]|; thus > is a partial model for these rules. For the remaining 
rules we have: 

[/ac(0),a] = 2> 1 = [s(0),al 

|/ac(s(x)), al = (2a(x) + 4)! = (2a(x) + 4) • (2a(x) + 3)! > 

2((2a(x) + 2)! + l){a{x) + 2) = lmul{fac{x),s{x)),a\ 

{mul{x, 0), al = 2{a{x) + 1) > = [0, q] 

[mwZ(0, y),a\= 2{a{y) + 1) > = [0, q] 

lmul{x, s{y)),a\ = 2{a{x) + l){a{y) + 2) > 

2{a{x) + \){a{y) + 1) + a{x) + 1 = \add{mul{x^ y),x), a] 

ladd{x, 0), a] = a(a;) + 1 > a(x) = {x, a] 

[a(id(0,y),a] = 2a{y) + 1 > a(y) = ly,aj 

ladd{x, s(y)), a] = a{x) + 2(a(y) + !) + !> a(x) + 2a{y) + 2 = l5{add{x, y)), aj 

for all a : — > N. Hence > is a partial model for all rules in R. Moreover, T is defined 
(that is, Ti) since [/ac(s"(0))] = (2n + 2)! G N. By Theorem [33] we conclude SNr{T), that 
is, R is terminating on T. 

4. Local Relative Termination 

We define local relative termination. 

Definition 4.1. Let A be a set and — t-i, — )-2 A x A binary relations. Then — )-i is called 
terminating relative to —^2 on B Q A, denoted SN_>.^/_>.2 (-B), if — )-i / -^2 = ^2 ■ —^1 • -^2 
is terminating on B. We write SN_j.j/_j.2 for relative termination on A. 

Let R, S be TRSs over S, and T C Ter(S, X). Then the TRS R is called terminating (or 
strongly normalizing) relative to S on T, denoted SNji/g{T), if -^n is terminating relative 
to — >5 on T. We write SN^/^ for relative termination on all terms Ter(T,, X). 

Remark 4.2. Termination of R relative to S* on T is equivalent to: no term t ^ T that 
admits an infinite rewrite sequence t = ti —^r\js ^2 -^Rus ■ ■ ■ containing an infinite number 
of —7- /J steps. Furthermore we have SN/j(T) if and only if SN/j/0(T). 

Definition 4.3. An extended well-founded monotone partial T,-algebra {A, |-], y, □) consists 
of monotone partial S-algebras {A, [•],>-) and (^4, [•],□) such that SN^/^ holds. 

Note that SN^/^ implies that {A, | • ], ^) is well-founded. The usual condition V • □ C y 
and well-foundedness of is a special case of our condition 'SN^/^': 

Lemma 4.4. Let A be a set and >- Ax A binary relations such that y is well-founded. 
Then y • ^ y implies SN^/^. 

Proof. Assume that SN^/^ would not hold. Then there exists an infinite {y U □)-sequence 
containing infinitely many y steps. Using y ■ ^ Q y we can remove all intermediate Ill- 
steps giving rise to an infinite sequence, contradicting well-foundedness of ^. □ 
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Lemma 4.5. Let {A, |-], y, □) be an extended well-founded monotone partial T,-algebra and 
let R and S be TRSs over S such that y is a partial model for R, and □ is a partial model 
for S. Furthermore, assume for s G Ter(S,0) that Then we have the implications: 

(i) s^Rt =^ Isjy (tj, and 

(ii) s^st ^ m. 

Proof. The proofs of (i) and (ii) are identical, we just prove (ii). Let s —^s that is, we have 
a rule i ^ r G S , substitution a and context C such that s = C[£a] and t = C[ra]. Since 
|s] I and ia is a subterm of s, we also have [£cj] | , so {£, a} □ |r, a] , as □ is a partial model 
for S. Then using closedness and monotonicity of the interpretations |/] of all function 
symbols / G S we obtain [s] □ pl. □ 

We give a complete characterization of local relative termination in terms of extended 
monotone partial algebras. 

Theorem 4.6. Let R and S be TRSs over S, and T C Ter(S, 0). Then SMr/s{T) holds if 
and only if there is an extended well-founded monotone partial Ti-algebra A = {A, |-], 
such that the set T is defined, y is a partial model for R, and ^ is a partial model for S. 

Proof. For the 'only if'-part assume that SHR/g{T) holds. Let A = {A, |-], y, □) where A = 
JuniRusiT) and the interpretation of a function symbol / G S is defined by [/](ii, . . . , t„) = 
f{ti, . . . , tn) if f{ti, . . . ,tn) & A, and [/](ti, . . . , t„,)'[ otherwise. The relations □ and >- are 
defined by □ = ^rus D (A x A) and y = {-^r ■ ^rus) n (^ x ^). 

We verify that A is an extended well-founded monotone partial S-algebra. Suppose 
>- would not be well-founded. Then there exists t G J-amR\js{T) admitting an infinite 
-^R ■ -^Rus rewrite sequence, contradicting SNr/s{T). We have y ■ ^ Q ^ by definition, 
and consequently SN^/^ by Lemma [4.4[ For / G S we show that [/] is closed and monotone 
with respect to y (for □ the reasoning is the same). Consider s,t £ A with s y t. Whenever 
[/](..., s, .. .)| we have also |/](. . . , t, . . .) (since the family FamRyjs{T) is closed under 
rewriting), and hence |/](. . . , s, . . .) y |/](. . . , t, . . .) as a consequence of the closure of 
rewriting under contexts. Hence A is an extended well-founded monotone partial S-algebra. 

The set T is defined, since for every term s £ T we have |,s] | by definition. It remains to 
be proved that :^ is a partial model for R, and □ a partial model for S. We only consider y, 
as the reasoning for □ is the same. Let £ ^ r € R and ex.: X A such that a] J^. Then 
[£, a] = £a -^R ra = |r, a] . Then {£, a} y |r, a] because both {£, a} € A and [r, a] G A. 

For the 'if'-part assume that A = {A, [•], y, □) fulfilling the requirements of the theorem 
is given. Assume that SNr/s{T) would not hold. Then there exists tQ £ T which admits 
an infinite — U — >5 rewrite sequence tQ ti ^ . . . containing an infinite number of — 
steps. By Lemma 14.51 this sequence then would give rise to an infinite ;^ U □ sequence: 
{to} {y U □) (^ U □) . . . containing infinitely many :^-steps, contradicting SN^/^. □ 

Example 4.7. We consider a simple example to illustrate the method: 

R = {a^b} S = {b^b, fib) ^ /(a)} T = {a} 

Global relative termination does not hold, e.g. not on /(a). However on T the rule 

a — > 6 is terminating relative to the other rules. We can prove this using the extended 
well-founded monotone partial S-algebra A = ({0, l},|-],>,>). The interpretations are 
given by: |a] = 1, |6] = and |/](x)| for all x £ A. Then T is defined, ;^ is a partial 
model for i? (|a| = 1 > = [6|), and □ is a partial model for 5 ([&! = > = |6] and 
I/(^)lT)' Hence we conclude SMR/g[T) by an application of Theorem 14.61 
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See further Example 19.61 in Section [9] for a non-trivial example. 

5. Stepwise Removal of Rules 

For termination proofs it is common practice to weaken the proof obligation stepwise by 
removing rules. The idea is to find interpretations such that a part R' Q R of the rules is 
decreasing (y) and the remaining rules are weakly decreasing (□). Then for termination of 
R it suffices to prove termination of the rules in the complement R\R'. We would also like 
to have this possibility for proofs of local termination. However, for local termination we 
cannot simply remove (and then forget about) the strictly decreasing rules, as the following 
example illustrates. 

Example 5.1. Consider the set T = {a} in the TRS with the following rules: 

a — ^ 6 6—^6 

We define a monotone partial S-algebra (N, [•],>) by |a] = 1 and |6] = 0. Then the rule 
a — )• 6 is decreasing (> is a partial model) since |a] > and for 6 ^ 6 we have |6] = |6]. 
However, removing the strictly decreasing rule a — ?> 6 is not sound, since the resulting TRS 
is terminating on T. 

Let us briefly elaborate on the following theorem which enables us to remove rules 
stepwise. Assume that the goal is proving that R is terminating relative to S on T, that 
is, SN^/5(r). We start with zero knowledge: SN0/^y5(r). We search for an interpretation 
that makes a part R' Rof the rules decreasing (y) and the remaining rules in RUS weakly 
decreasing (□). Then the rules in R' can only be applied flnitely often: SNj:j//((-^y^/')y_5)(r). 
But how to proceed? As we have seen above, we cannot simply forget about the rules R', 
but need to take into account their influence on the family FamR\js{T). A possible and 
theoretically complete solution would be to require these rules to be weakly decreasing (□). 
However, for practical applicability this requirement seems too strict as it imposes heavy 
restrictions on the termination order. We propose a different approach, which allows the 
'removed' rules R' to change arbitrarily, even increase, the interpretation of the rewritten 
terms, as long as rewriting deflned terms yields deflned terms again. For this purpose we 
introduce a relation on j4, which is a partial model for the already removed rules, and 
thereby guarantees that these rules preserve deflnedness. 

Theorem 5.2. Let R, R' and U be TRSs over S, and T C Ter(S, 0) a set of terms such 
that SN^/(j:jyj:j/-)(T) holds. Then SN(^ijujiiyj^{T) holds if and only if there exists an extended 
well-founded monotone partial Ti-algebra A = {A, [ • ], and a relation ^ on A such 

that: 

(1) the set T is defined, 

(2) (j4, I • J,'^) is a monotone partial Ti-algehra, and 

(3) 3 and^ are partial models for R' , R and U, respectively. 

Proof. Straightforward extension of the proof of Theorem 14.61 The 'only if '-part follows 
immediately by taking ^ = y. For the 'if '-part consider an inflnite reduction ti ^ t2 ^ . . . 
with ti € T. Then since is a partial model for U, we conclude G N. |ti]J,. Moreover, 
as a consequence of SN(//(^y^/-)(r) we can cut off the preflx of the sequence containing the 
flnitely many U steps. □ 
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Example 5.3. We reconsider Example 13.81 and prove termination of R on T. The usage 
of Theorem 15.21 allows for a simpler stepwise termination proof. In particular, for removing 
the rules for fac we can employ the standard interpretation mul as • and add as +. Let 
A = (N, [•],>,>) where > is the natural order on N, and | • ] is given by: 

[01=0 [sl(n)=n+l I/acl(n) = (n + 2)! 

lmulj{n,m) = n ■ m |adrf](n, m) = n + m |— ](n, m)| 

for all n,m G N. Then > is a partial model for (jpij) and (j£2|: 

|/ac(0),al = 2>l = Is(0),al 

lfac{s{x)),aj = (a(x) + 3)! > (a(x) + l)(a(x) + 2)! = lmul{fac{x),s{x)), aj 

and obviously > is a partial model for the other rules. Let Ui = {(jpij), (jplf }, and Ri = R\Ui. 
Then by Theorem 15.21 it suffices to show SNjy^/jijj (T) to conclude SN/j(r). 
As second step, we remove the mul rules. Let A = (N, [•],>, >) with: 

[01=0 [s](n) = n+l lfacj{n)=n 

lmul}{n,m) = {n + 1) ■ {m + 1) ladd}{n,m) = n + m [— ](n,m)| 

for all n, m G N. Recall that the rules from Ui have to be taken into consideration as they 
have an impact on the set of reachable terms (otherwise the set of terms T would consist 
only of normal forms). Nevertheless, the rule (jpll from Ui is not (weakly) decreasing, that 
is, > is not a partial model for ( jp2T ) with respect to the above interpretation: 

lfac{s{x)),al = a{x) + 1 ^ (a(x) + 1) • {a{x) + 2) = lmul{fac{x),s{x)),al 

This is also not necessary. It suffices that Ui is decreasing with respect to any other relation 
guaranteeing that all reachable terms are defined. For the current example we can choose 
the 'total' relation = {(n, m) | n,m G N} relating all pairs of natural numbers. Then ~> 
is a partial model for Ui, and all |/] for f are closed and monotone with respect to 
The rules ( jpjj ), ( jpg] ), and ( jpgl are decreasing (> is a partial model), for all a : ^ — )• N: 

lmul{x, 0), q] = a{x) + 1 > = [0, a] 

lmul{0,y),aj = a{y) + 1 > = I0,aj 

lmul{x, s(y)), aj = (a(x) + 1) • (a(y) + 2) > 

(a(x) + 1) • {a{y) + 1) + a{x) = \add{mul{x^ y)-,x), a] 

The remaining rules in Ri are weakly decreasing (that is, > is a partial model). We define 
C/2 = ?7iU{(i24j), ([£11, (lElj)}, and let i?2 = -Ri\f/'2. Then by Theorem [5JSN[/2/k2(T) implies 

Finally, we employ the algebra A = (N, [•],>,>) with: 

[0]=0 [sl(n) = n+l [/ac](n)=n 

[mul\{n,m) = n + m \add\{n,m) = n + 2m [— ](n, m)| 

for all n,m G N, together with ~> = {(n, m) | n,m G N}. Thereby > is a partial model for 
all rules from i?2, and is a partial model for C/2. Hence, we conclude SN^2/fl2(^)' ^'^^ 
thus SHr{T). 

For other applications of the theorem see Examples 19.61 and 19.71 in Section [9l 
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6. Via Models from Local to Global Termination 

In this section we describe an easy transformation from local to global termination based 
on an adaptation of semantic labeling [Zan95j . For this purpose we generalise the concept 
of models from |Zan95j to partial models. Whenever the language T for which we are 
interested in termination can be described by a partial model, that is, T = {t \ |i]J,}, 
then semantic labeling allows for a simple, complete transformation from local to global 
termination. Here complete means that the original system is locally terminating on T if 
and only if the transformed, labeled system is globally terminating. 

We define a variant of semantic labeling where each symbol is labeled by the tuple of 
the values of its arguments. 

Definition 6.1. Let S be a signature, and let A = {A, [ • ]) be a partial S-algebra. For 
t € Ter(S, Af) and a : Var{t) A such that [i,a]J^, the labeling labjx{t,a) oft with respect 
to a is defined as follows: 

laby\^{x, a) = X 

labMih, . . . , tn),a) = /[*i'°l'-'I*-°l(/a6^(ti, a), . . . , lab^tn, a)) . 

over the signature /a&^(S) = {/^ | / g S, AG ^ti(^) such that I/1(A)|} 

In order to obtain a complete transformation we need to restrict the models to their 
core, that is, those elements that are interpretations of ground terms. 

Definition 6.2. Let A = {A, | • ]) be a partial S-algebra. Then the core Ac ^ ^ of A is 
the smallest set such that [/](ai, . . . , o„) G Ac whenever / G S and ai, . . . , G Ac with 
[/](ai, . . . ,an)l- We say that A is core if ^ = Ac- 

By construction of the core we have Ac = {ft} \ t G Ter(S,0), |i]J,}. The restriction 
of a model to its core does not change its language, thus in the sequel we can without loss 
of generality assume that all models are core. 

We have arrived at the transformation from local to global termination. The rules are 
labeled as known from semantic labeling with the exception that labeled rules are thrown 
away if the interpretation of their left-hand side is undefined. 

Definition 6.3. Let i? be a TRS over E, and A = {A, [ ■ ]) a partial S-algebra. We define 
the labeling of R as the TRS labj\^{R) over the signature /a6^(S) by: 

lab_A{R) = {labj[{i,a) labj\^{r,a) \ i r £ R, a: Var{i) A such that a]|} . 

A TRS is collapsing if it contains rules of the form i x with x X. Such collapsing 
rules can be eliminated by replacing them with all instances iaj xaj for every f T, 
where = f{xi, . . . , x„) with xi, . . . , x„ pairwise different, fresh variables. 

Theorem 6.4. Let R be a non- collapsing TRS over S, and A = {A, [•]) a core partial model 
for R. Then R is locally terminating on C{A) if and only if lab^{R) is globally terminating. 

Proof. We introduce types for labji^{R) over the sorts A. For every symbol G /a6^(S) 
with A = (ai, . . . , ajj(j-)) we define f^ to have input sorts (ai,...,a„) and output sort 
[/](ai, . . .,«„,). Then |0hin2[ Proposition 5.5.24] with non-collapsingness of labjx{R) yields 
that labjx{R) is terminating if and only if all well-sorted terms are terminating. Since A is 
core there exists a well-sorted ground term for every sort in A. Thus by application of a 
ground substitution we can assume that all rewrite sequences contain only ground terms, 
and the set of well-sorted ground terms is exactly the language C{A) of the model A. □ 
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To apply Theorem 16.41 for proving local termination of R on a set of terms T we have 
to find a partial model A for R such that T C C{A). Then global termination of lahji^{R) 
implies local termination of R on T. If moreover we have J-am(T) = C{A), then the 
transformation is complete, that is, the converse implication holds as well. 

Example 6.5. We revisit Example 13.71 on the S combinator with T = {S"' | n € N}. 
We choose the partial model A = {A, [ • ]), where A = {0,1,2} and the interpretation 
is defined by: [S] = 0, [@1(0,0) = 1, [@l(l,x) = 2 for ah x e A, I@l(2,0) = 2, and 
t otherwise. Then T C C{A) and a short proof even shows that Fam{T) = C{A). The 
labeling lah_A{{Sxyz xz{yz)}) is: 





ai'0(( 


8)0,0 1 


:s, 


x) 


,y), 


z)- 




a)0.0(^, 










8)0,0 1 
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X) 


,y), 


z)- 




a)0'0(x. 




@''°(?/,^)) 




ai'2(( 


8)0,0, 


:s, 


X) 


,y), 


z)- 




a)0'0(x. 




@''°(2/,^)) 



The other labeled rules are thrown out as their left-hand side is undefined. Global termi- 
nation of the transformed system can be shown by the recursive path order |Der82] . 



7. Starling and Owl 

In this section we consider TRSs with the property that strong and weak normalisation 
coincide. In case the language of normalising terms happens to be regular, we show how 
a tree automaton (partial model) can be found accepting exactly the (closed) normalising 
terms. We automated this procedure. Then we label the TRS with the obtained partial 
model, and employ Theorem 16.41 to transform the local termination problem for the set of 
normalising terms to global termination of the labelled TRS. 

Since in orthogonal, non-erasing term rewriting systems strong and weak normalisation 
coincide, these form a typical area where the method can be applied. In this section we illus- 
trate this construction with two well-known examples from combinatory logic (CL) [Cur 30] . 
We use Smullyan's bird nicknames of the combinators |Smu90] . 

(1) The Owl, corresponding to the rewrite rule: 

6 xy ^ y{xy) 

(2) The Starling 

S xyz — )■ xz{yz), 

also known as the fragment CL(S) of combinatory logic consisting of all terms solely 
built from application and the S-combinator. 

The termination problem of Smullyan's Owl has been solved in |Klo07j . Here, it serves as 
illustrating example. 

The termination problem of CL(S) is non-trivial, and its word problem is still open. 
In jWalOO] decidability of strong normalisation of terms in CL(S) has been shown, and we 
are aiming at a formal verification of the following proposition: 

Proposition 7.1 ( jWalOO| ). The set of normalising ground S-terms is a rational language. 



We now turn to the construction of the partial models. 
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Definition 7.2. For a tree language L, its Nerode congruence ~l is the relation on ground 
terms given by ti ~l t2 -4=^ Vground C[] : C[ti] € L -4=^ C[i2] € L. 

The next lemma follows easily by considering the Nerode congruence lCDG+07] . 

Lemma 7.3. If a TRS R has the property that every ground term is weakly normalising if 
and only if it is strongly normalising, and N is the language of normalising ground terms, 
then 

• each congruence class of is closed under R-rewriting and closed R-expansion, 

• the complement of N occurs as one of the ~Ar congruence classes. 

Proof. Note that under the assumptions on R, for each term t £ N and each subterm s of 
a term in N we have s £ N. In other words, s ^ N implies C[s] ^ N. Also, for all ground 
terms ti, t2 with ti — t2 we have ti £ N -4=^ t2 G N. The claims follow. □ 

In particular weak and strong normalisation of terms coincide for every orthogonal and 
non-erasing TRS; this applies for CL(S) as well as Smullyan's Owl. We note that the set of 
congruence classes of ~Ar can in general be infinite, even for orthogonal, non-erasing TRSs. 

Example 7.4. We consider an example of an orthogonal, non-erasing TRS where the set 
of congruence classes of ~Ar is infinite. Let R consist of the rules: 

a{b{x)) X c{c{d)) c{c{d)) 

over the signature S = {a, b, c, d} with d a constant. Here, terms of the from c(a"'(6"(c((i)))) 
are non-terminating, while all terms of the form c{a^ {b"^ {c{d)))) with n ^ m are terminating. 
Hence none of the terms b'^{c{d)) for n G N can be in the same congruence class of ^n- 

Corollary 7.5. // the set of congruence classes of is finite, then the minimal complete 
deterministic bottom-up tree automaton for N is finite and a model for R. 

Thus, if the set of congruence classes of is finite, then the set of normalising terms 
is a regular language. Assume that we are lucky and the set of congruence classes is finite. 
How can we find the regular automaton accepting the set of normalising terms ? 

A manual analysis and construction of the automaton as in [WalOOj can be tedious and 
error-prone. The reference contains a hand-made tree grammar (top-down non-determinis- 
tic tree automaton A) and claims: 

• the 5" rule is locally terminating on L{A), 

• L{A) contains all normal forms, 

• A is closed under inverse application of the S rule. 

Starting from that grammar, we can indeed compute a bottom-up minimal deterministic tree 
automaton B with L{B) = L{A) (strangely, it has 39 states, and not 43, as claimed in the 
reference) . 

We propose a different, automatable approach for finding a regular automaton accepting 
the language of all normalising terms. The idea is to employ the definition of the Nerode 
congruence for 'guessing' the congruence classes. Here we use the word 'guess' in place of 
'compute' since we need to check whether a term C[s\ is terminating. This property is in 
general undecidable. We can, however, make an educated guess by choosing a large enough 
d and checking whether C\s\ admits a rewrite sequence of length d with respect to some 
strategy Note that the strategy can be chosen arbitrarily since we assume that weak 
and strong normalisation coincide. 
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Definition 7.6. |TeR03| A strategy ^ for a TRS is a relation ^ C on Ter(S,;f) 
having ttie same normal forms as — A strategy ^ is called deterministic if every term t 
has at most one reduct s, that is, t ^ s. 

The following algorithm searches for a partial model for the language of normalising 
terms. The algorithm depends on a strategy for R and parameters c, d € N where c is the 
maximal depth of contexts C, and d is the length of ^-reductions used to guess whether a 
term is normalising. 

Instead of the full Nerode congruence of the set of i?- normalizing terms, which might 
be undecidable, we use an decidable equivalence relation ~ on terms given by s ~ t iff for 
each context C[] of height < c, either both C[s] and C[t] have a -^-derivation of length at 
least d, or both don't. 

Algorithm 7.7. Starting from the full relation ~o that relates all pairs of terms, we com- 
pute successive refinements ~o ^ ~i ^ • • •• Each ~j is given as a finite set of representatives 
Ti = . . . ,^i,jTi|} with k ^ I ^ ti^i: ti^i, where ~ is the Nerode-like relation defined 
above. The ~i-equivalence class of non-normalizing terms is not explicitly represented. By 
Lemma 17.31 this is no loss of information. The full relation ~o is given by Tq = 0. We set 
Tj+i = Tj U {s} where s = f{si, . . . , Sa), for a choice of function symbol / of arity a, and 
terms (si, . . . , Sa) € T", such that the -^-derivation of s has length < d, and s 1 for each 
t £ Ti. The algorithm stops if no such s can be found. 

We remark that Ti consists of one element, which is a term containing a nullary symbol 
only. Each ~j computed by this algorithm constitutes a partial algebra (on the carrier Ti), 
since each step of the algorithm defines one part of the interpretation of a function symbol. 

The goal is that the output algebra is a partial model for R, exactly capturing the 
Nerode congruence. This may fail, for two reasons. If d is chosen too small, then a nor- 
malising term C[s] may mistakenly be considered non- normalising. If c is too small, then 
terms may accidentally be identified, although they behave differently when put into larger 
contexts. 

Nevertheless, it can be shown that if the language of normalising terms is regular, 
then there exist appropriate parameters c and d such that the algorithm will compute the 
correct partial model, see Lemma 17.81 The case of having chosen c or d too small can be 
detected after running the algorithm as follows. Let A be the algebra computed by the 
algorithm. It can be effectively checked whether .A is a partial model for R, and whether all 
undefined terms |t] | contain a redex with respect to R. Then it automatically follows that 
all undefined terms are non-normalising. Finally we can employ Theorem 16.41 to transform 
the termination problem for all defined terms [t]J^ into an equivalent global termination 
problem of labj[{R). If we find a termination proof for lahj({R), then the partial model A is 
correct and accepts exactly the language of normalising terms. 

Lemma 7.8. Let R he a TRS such that every ground term is weakly normalising if and 
only if it is strongly normalising. If the language N of normalising terms is regular, then 
there exist appropriate parameters c and d such that Algorithm \ 7. 7| computes the correct 
partial model accepting exactly N . 

Proof. If the languages N is regular, then the set of congruence classes of ~Ar is finite. Let 
n = |Ter(5], 0)/^^ I, and let T C Ter(S,0) be the set of all ground terms of height <n + l. 
Then T contains at least one representative to ^T for every D G Ter(S, 25)/ For every 
pair {tciijtD'z) of representatives with t/j^ 7^ we pick a 'discriminating' context C such 
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that C[tj:)i] £ N ^ C[tD2] S Let C be the set of these (finitely many) contexts. We 
choose for c the maximal depth of all contexts in C £ C, and for d the maximal length of 
a '-^-reduction of all normalising C[t] € with C G C and t £ T. Then the choice of d 
guarantees that terms C\t\ will not accidentally be identified as non-terminating, and the 
choice of c guarantees that all non-equivalent terms in Tj will be distinguished. □ 

We have implemented Algorithm 17. 7| the Haskell source can be downloaded from: 
http : / / inf inity . f ew . vu . nl/local/ 

We have applied the algorithm on Smullyan's Owl and CL(S), obtaining in both cases the 
minimal partial algebra accepting the language of all normalising terms. Further details, 
including the respective partial models, are given below. 

Example 7.9 (Smullyan's Owl). Smullyan's Owl serves as illustrating example. The set 
of normalising Owl-terms has been found in |Klo07] . The Owl corresponds to the following 
rewrite rule: 

5 xy ^ y{xy) 

or, equivalently, in first order notation: 

@(@((5,x),y) ^@(y,@(x,y)) (7.1) 

Applied to Rule (j7.ip . Algorithm 17.71 computes the partial model A = ({0, 1}, \ ■ ]) where 
\5\ = 0, and the interpretation of @ is given in Table [TJ 








1 





1 


1 


1 


1 





Table 1: Interpretation |@](j;,2/) for the Owl with x on the left and y on the top. 



Examples for terms t G C{A)^ that is, normalising terms, are 

555... 5, 5{55 ...5)5 ...5,mid 5{5{55)55)555 

For an example of a non-normalising term take 55{55). In words, the set of undefined 
(non-normalising) terms can be described as follows: a term is undefined if it contains two 
distinct occurrences of 55. Note that the term 555 . . .5 = {. . . {{55)5) . . .)5 contains only one 
occurrence of 55 (or @((5, (5) in first-order notation). 
First, we check that A\s a, partial model for R: 

{5 xy, aj = l = ly{xy),aj for a{x) = 0, a{y) = 

{5 xy^aj] and ly{xy),al] for a{x) = 0, a{y) = I 

{5 xy, a} = 1 = ly{xy), a} for a{x) = 1, a{y) = 

{5 xy,al] and [y(a;y),a]| for a(a;) = 1, a(y) = 1 

Second, we use induction on the term structure to show that every undefined term contains 
a redex. Let t G Ter(S,0) be a term such that Then by definition of | ■ ] the 

term t is of the form t = @(ti,t2) and either ftij = {12} = 1, or , or |t2l|. In the 
latter two cases it suffices to apply the induction hypothesis to ti or t2, respectively. Thus, 
let = |t2] = 1. We use induction on the term structure of ti. Again, by definition of [•] 
the term h is of the form h = @{t[,t2) with = 0, or [f'J = 1. If [t'J = 0, then t[ = 5 



18 



J. ENDRULLIS, R. DE VRIJER, AND J. WALDMANN 



and t = @(@((5, t2), t2), and hence t contains a redex. For {t'lj = 1 we finish by applying the 
second induction hypothesis. 

Third, we prove termination for all defined terms. An application of Theorem 16.41 yields 
the following labelled TRS: 

@1, 0(@0, 0(5, x),y) @0, 1(2/, @0, 0(2;, y)) for a{x) = 0, a{y) = 

@1, 0(@0, 1(5, x),y) ^ @0, l{y, @l,0{x, y)) for a{x) = 1, a{y) = 

Termination of this system can easily be proven; for example AProVE |GTSKF04j finds a 
termination proof using the recursive path order. 

Thus, indeed, A is a partial model accepting exactly the normalising 5-terms. 

Example 7.10 (The set of normalising S-terms). For CL(S), Algorithm 17.71 returns 
the partial model A = {A, | ■ ]) where A = {0, 1, . . . , 37}, [S] = 4, and the interpretation of 
@ is given in Table [2j Indeed, it can be checked that A is equivalent to the grammar given 
in [Wainnj . 
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Table 2: Transition table for |@](x,y) with x left, y top. 

We have formally verified (using the proof assistant Coq |Coq| ) that „4 is a partial model 
for CL(S) and that the language of A contains all normalising terms. 

For proving that CL(S) is terminating on the language of A we have transformed the lo- 
cal into a global termination problem using Definition l6.31 The resulting TRS contains 1800 
rules which are globally terminating, as can be shown using the DP transformation with SCO 
decomposition [AGOG] together with simple projections and the subterm criterion |HM04j . 
The termination proof can be found automatically, and formally verified using the current 
versions of CeTA (1.05) |TS09] and TTT2 (1.0) |KSZM09j . 
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8. The RFC Method 

We show that the method proposed in Section [6] is not only useful for local termination, but 
can fruitfully be employed for global termination as well. In |Der81j . Dershowitz reduces 
global termination of right-linear TRSs to local termination on the set RFC(i2), called the 
right-hand sides of forward closures of R. The set RFC(i?) C Ter(S, A") is a subset of all 
terms, weakening the proof obligation, and often allowing for simpler termination proofs. 
Previously, the only automated method employing this transformation for proving global 
termination has been the method of match-bounded string rewriting |GHW04] . In the 
present paper we advocate an alternative approach. 

We propose a combination of the RFC-method with the transformation from Section [6j 
More precisely, we first reduce the global termination problem to a local termination problem 
on RFC(i?), and then we transform this problem back into a global termination problem. We 
show that this method can successfully be applied to obtain proofs for global termination; 
see further Example 18.31 for a rewrite system that remained unsolved in the termination 
competition jTer08j . 

A string rewriting systems (SRS) ii is a TRS R where all symbols / G S of the signature 
are unary. We then use words ai . . . an to denote terms an{- ■ ■ ai{x)) . 
For SRSs R the set RFC(i?) can be defined as follows: 

Definition 8.1 ( |Der81j ). Let Rhe a, SRS over S. The right-hand sides of forward closures 
of R, denoted RFC(i?), are defined as the smallest set F QT,* such that: 

• Ths{R) C F, 

• if It € -F and u ^ v, then v & F (rewriting), and 

• if uii G F and £1^2 r G R with ii 7^ e, then ur ^ F (right extension). 
We have the following well-known theorem: 

Theorem 8.2 ( |Der81j ). A string rewriting system R is terminating on S* if and only if 
R is terminating on RFC(i2). 

The set RFC(i?) can be (over-) approximated by using the system 

-R# = {n# r# j (n • -y r) G i?, u / e, w / e} 

over = SuIt^}, where ^ acts as an end marker. Then RFC(i?)^ = (RUR^)* {rlas{R)^) , 
and we can reduce the global termination problem of R to local termination of RU R^ on 
rhs(i?)^. More generally we have the following observation: whenever M ^ rhs{R)i^ is 
closed w.r.t. R U i?^, then RFC(M)7^ C M. The closure under rewriting can be proven by 
giving a partial model A {M is the language of a partial S^-algebra A). 

Example 8.3. Take S = {a, 6, c} and 

ii = {a — 7- e, 6 — > e, cc ^> a, 6a — 7- cacbb}. 

This is the mirrored version of SRS/Waldmann07b/size-12-alpha-3-nuin-223 which has 
not been solved automatically in previous termination competitions. We present a partial 
E^-algebra A with 3 elements A = {1, 2, 3} and interpretations of function symbols: 

a:lh^l,2h^2;6:lh^l,c:lh^2,2h^l,#:lh^3, 2h^3, 

and 6(2) as well as all transitions from 3 are undefined. Note: we consider the right end of 
the string to be the top symbol of the term. It can be checked that ^ is a partial model for 
i?Ui?#, and its language contains rhs(i?)#. As a consequence we have C{A) C RFC(i?)#. 
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Formally, for the existence of ground terms, we add a fresh constant e with interpretation 
|e] = 1. This constant does not harm the property of A being a partial model for R U R^, 
and does not affect the termination behaviour: since SRSs are linear, RUR^ is terminating 
on rhs(i?)# if and only if U R^ is terminating on {a„(. . . ai(e)) | ai . . . a„ G rhs(i?)#}. 
We obtain the following labelled system: 

Ra = {oi e, a2 e, bi e, C1C2 ai, C2C1 02, 6iai £102026161}, 

termination of which is equivalent to termination of R. Indeed is easily seen to be 
terminating. E.g., Torpa jZan05| finds the following termination proof: 
[A] Choose polynomial interpretation 
al cl: lambda x.x+1, 
rest identity 
remove: al -> 
remove: c2 cl -> a2 
[AC] Reverse every Ihs and rhs and choose polynomial 
int erpr et at i on : 
al and cl: lambda x.lOx, 
rest lambda x.x+1 
remove : a2 -> 

remove: bl al -> cl a2 c2 bl bl 
remove: bl -> 
remove: cl c2 -> al 
Terminating since no rules remain. 

For automating this method, the challenge is to find a partial model such that the resulting 
labelled total termination problem is easier than the original one. In particular, the domain 
of the partial algebra must be a proper subset of the full algebra (S*). In our example, the 
domain excludes all words containing the factor 6c6. □ 

9. Monotone-models for Local Termination 

In Sections [SHS] we have devised a characterisation of local termination in terms of mono- 
tone partial algebras. While this gives the general method, for the purpose of obtaining 
automatable methods we strive for fruitful classes of these algebras. For global termination, 
instances of monotone algebras are well-known. This raises the natural question whether 
we can transform a given monotone algebra for global termination in such a way that we 
obtain a partial monotone algebra for local termination. 

In this section we present one such approach. We combine monotone partial models 
with (ordinary) monotone algebras. The monotone partial models are roughly deterministic 
tree automata that are closed under rewriting; they describe the language of term on which 
we proof termination. We search for such an automaton that accepts the starting language 
T together with a monotone algebra such that the rewrite rules decrease on the language 
of the automaton. In this way monotone algebras for global termination carry over to local 
termination, and we obtain an automatable method that is applicable for proofs of local 
termination. 

First we give the definition of extended /i-monotone algebras as known from global 
termination of context-sensitive TRSs, see |Luc981 IEWZ08] . A mapping /i : S — )• 2^ is 



LOCAL TERMINATION: THEORY AND PRACTICE 



21 



called a replacement map (for if for all / € S we have //(/) Q {1, . . . , tt(/)}- Let {A, [ • ]) 
be a S-algebra and fi a replacement map. For symbols / € S we say that the interpretation 
I/] : A'^^^^ —7- a is fi-monotone with respect to >- if for every a,b € A and i € /^(/) with 
a >- b we have: f{.^^_^, a, ) ^ /(•••; ■■■) • 

»-l tt(/)-i 

Definition 9.1. Let ^ be a replacement map for S. 

An extended well-founded ^-monotone Ti-algebra {A, | •],>-, is a S-algebra {A, [ • ]) with 
two binary relations □ on ^ for which the following conditions hold: 

(i) SN^/^, and 

(ii) for every / € S the function |/] is /i- monotone with respect to >- and 

A partial model A = {A, | • ], >) may contain elements a A for which [t] = a implies 
that t is a normal form. For a given partial model the set of these, which we denote by A^f^R) , 
can be computed (see below Definition 19. 2p . We can exploit this knowledge as follows: if 
a certain argument of a symbol / € S is always a normal form, then its interpretation |/] 
does not need to be monotonic for this argument position. The following definition gives an 
algorithm for computing the set A^f^R)- Elements that are interpretations {i, a] of left-hand 
sides in R cannot belong to this set. Moreover if a ^n/(_R) and b = |/](. . . , a, . . .) then we 
conclude b A,^j:(^jiy This is formalised as follows: 

Definition 9.2. Let i? be a TRS over the signature S, and A = {A, |-]) a partial S-algebra. 
The normal forms ^n/{_R) of A are the largest set ^n/(K) ^ such that a] Anf{R) foi' 
every i ^ r G R and every a : Var{£) — > Ac, and |/](ai, . . . , a„) ^n/(_R) for every / S S, 
ai ^ ^nf(R) and oi, . . . , a„ G A- 

Then by construction we obtain the following lemma: 

Lemma 9.3. Anf(ii) consists of all a ^ Ac for which every term t € Ter(S, 0) with {tj = a 
is a normal form with respect to R. 

As mentioned above the interpretations do not need to be monotonic in argument 
positions which are normal forms. We formalise this by defining a replacement map for the 
labelling labj^{R) of R which does not contain argument positions that are in normal form. 

Definition 9.4. Let i? be a TRS over S, and A = {A, | • ]) a partial S-algebra. Let the 
replacement map ^"-^(^^ be defined for every symbol f^ € Za6^(S) with A = (oi, . . . ,aj(f)) 
as follows: f^^f^^^ (/^) = {!,..., «(/)} \{i\a,e 

As an instance of Theorem 15.21 we obtain a method for stepwise rule removal for lo- 
cal termination that is based on a combination of monotone partial models and extended 
monotone algebras. 

Theorem 9.5. Let R, R' and U be TRSs over S, and T C Ter(S, 0) a set of terms such 
that SNij/jiujii(T) holds. Furthermore let A = {A, | • ], >) be a monotone partial model for 
RUR'UU with T C C{A), and B = {B,l- ]g, □) an extended well-founded y^«/(«ufl'). 
monotone {labj^{Ti))- algebra such that: 

(1) {B,y) is a model for labj\^{R'), 

(2) (-6,3) is a model for lab_A{R), and 

(3) for all f eT,, aiaa2 e A^^'f^ a > a' e A, and 6i, . . . , G B: 

W^^'%{b,, . . . □ '^''^^1^(61, . . . . 
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Then SH(^uujiiyji{T) holds. 

Proof. We construct an extended well-founded monotone partial S-algebra C = {C, [ • 
Ic) !^C) 3c) fulfilling the requirements of Theorem l5.2i Let C = AxB, and define {ai, bi) yc 
(02,62) <^ «i ^nf{RuR') & oi > 02 & 61 ^ 62 and (ai,6i) (02,^2) <^ «i ^ 
Anf(RuR') & oi > 02 & 61 □ &2- Notc that the //"-^(^^^'^-monotonicity is implemented by 
excluding elements (ai, bi) with ai £ ^n/(i?ui?') from being sources of ;^ U □ steps. Then for 
each/eE: [/lc((ai, ^1), ■■■ ^'K/))) = ([/U(ai, as(;)), [r^'---'««(/)le(6i, ^ 
if [/]_4(ai, ■ ■ ■ , au(j))|, and t otherwise. Finally, we define the relation on C by (ai, 61) 
(02, ^2) ^^==^ oi > fl2- Now it is straightforward to check that all requirements of Theorem l5.2l 
are fulfilled, and we conclude SN([/u/j/)//j(T). □ 

Let us briefly elaborate on the theorem. As an instance of Theorem 15.21 Theorem 19.51 
is applicable for proving local termination as well as local relative termination. We start 
without knowledge SN0/^y5(T) and stepwise 'remove' rules, more precisely, we move rules 
from the right side to the left side of the slash '/'. If we reach the goal SN^/5'(T), then the 
proof has been successful. 

The use of partial monotone partial models for RU R' UU with T C C{A) guarantees 
that the language we consider is closed under rewriting. The set R' is the set of strictly 
decreasing rules that we are aiming to remove. The ^"/(^uif, )-]XLonotone /a6^(S)-algebra B 
then has the task to make all labelled rules stemming from R' strictly decreasing {y), and 
from R weakly decreasing (□). Then we conclude that R' UU is terminating relative to R 
on T. 

Example 9.6 (Klop, see |Bar84j . Exercise 7.4.7). Example 13. 71 can be generalised to include 
the combinator K, which has the reduction rule Kxy — )• x. The initial language of flat S, K- 
terms is T = (S|K)*; for example SSKS = (((SS)K)S). The partial model presented in 
Example 16.51 can be extended to a monotone partial model for this generalised example by 
fixing [K] = and 2 > 0, 2 > 1. Note that this is not a model due to {Kxy, a] = 2 > = 
[x, a] for a = Xz.O. For the complete proof, employing this model, we refer to: 

http : / / inf inity . f ew . vu . nl/local/. 

The second example illustrates the stepwise rule removal. 

Example 9.7. We use a Turing-machine-like TRS which does the following. Starting with 
its head between two symbols 1, the tape containing a finite string of I's and further blanks 
(0), it initially puts two boxes □ left and right of its head and afterwards alternately runs 
left and right between the boxes, each time moving them one position further, until the 
blanks are reached: 

llDl/^llllinil liailllllflnil 
llDllllllLini ^ liaLlllllllDl 
inii?llllllini ^ ... 
This is implemented by the TRS R consisting of the following rules: 

ISl^aRa Rl-^IR Rai-i-Lia Rao Fao 



IL^Ll laL-^aiR oaL-^oaR 

IF ^ Fl inF^DlR OaF^ finish 
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where all symbols apart form finish (which is a constant) are unary, but have been written 
without parenthesis for the purpose of compactness. Note that the construction of the TRS 
is similar to the standard translation of Turing machines to string rewriting systems as 
given in jTeR03| . 

While the Turing machine is terminating on every input, the TRS R fails to be globally 
terminating. The reason is that R allows for configurations with multiple heads working at 
the same time on the same tape: 

We will prove that R is locally terminating on all terms containing arbitrary occurrences 
of the symbols 0, 1 and at most one occurrence of S, that is, the language given by T = 
{0, 1}* 5 {0, 1}* finish. As the first step we remove the rules IS'l — )• ORO and OOF finish. 
We do this by using a monotone model A consisting of only one element, accepting all terms. 
We combine this model with the Za6^(S)-algebra B where B = N and = |0]g(a;) = 

x + 1, all other symbols are interpreted as \x.x. This makes the above two rules decreasing 
is a model for them). 

In the second step, we use a partial model A = {A, | • ], >) where A = {0, 1}, > 0, 
1 > 1 (but not 1 > 0), IfinishJ = and the other interpretations are given in Tabled 
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Table 3: Symbol interpretations. 



As required by the theorem ^ is a monotone partial model for R including the two removed 
rules U = {ISl — ?> OOF — )■ finish} (without them T would consist of normal forms). 

We use this partial model together with the extended well-founded monotone Za6^(S)- 
algebra B = (N, [-Jg, □) where >- and □ are the usual orders > and > on N, respectively. 
The interpretation [ • Ig is Ifinishj^ = 7, [1°1b(x) = 2 • x + 1, Il^le(x) = 2 • x, [□°le(x) = 
lO%{x) = X, lR%{x) = 2 • X, lL%{x) = 2 . X + 1, lF%{x) = 2 • x, lO%{x) = 2 ■ x, 
and [5'°|g(x) = 5 • x + 6. Then R' consists of the following rules: ROl LID, IL LI, 
lOL OIR, OOL OOR, and lOF OIR. Then {B,y) is a model for lahj^iR'). For 
instance consider the rule ROl — ^ LIO. The labelling R^O^l^ L^l^n° is in lab^iR') and 
its interpretation in is: i?^n°l°(x) = 4 • x + 2 > 4 • x + 1 = LH^n°(x). The labelling 
R^O^l^ — > L^l^O^ is not in labji^{R') since its left-hand side is undefined with respect to A, 
thus we can ignore this rule. Analogously it can be verified {B, □) is a model for labj^{R\R'). 
Since > is the empty relation on A the third condition of Theorem 19.51 holds trivially. 

The three remaining rules Rl — )■ IR, IF Fl, and ROO FOO are even globally 
terminating. This corresponds to taking a model which has only one state and accepts all 
terms together with the corresponding termination order which proves global termination. 
Hence we have proven SN/{(r) by three consecutive applications of Theorem 19.51 

Finally, we give a theorem that allows us to remove rules and forget about them. We 
need to be sure that these rules do not influence the family, that is, the set of reachable 
terms. This is guaranteed if all terms in the family are normal forms with respect to these 
rules. 
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Theorem 9.8. Let R, R' and S he TRSs over S, and T C Ter(S, 0). Let ^ = [ • 1, >) 

he a monotone partial model for RUR'US with T C C{A) such that for all rules i ^ r ^ R' 
and a : Var{t) A we have [£, a]| (the left-hand side is undefined). Then SN/j/5(T) 
implies SHj^yj^, /s{T). 

Proof. From Ta7njiujii\js{T) C C{A) together with a]| for all i ^ r & R' and a it 
follows that the rules in R' are not reachable. All terms in J^am{T) are normal forms with 
respect to R' . Hence we can ignore these rules. □ 

Example 9.9. Consider the TRS R consisting of the following four rules: 

/(s(s(x))) ^ f{o{x)) o(s(s(x))) ^ s(s(o(x))) o(0) ^ o(s(0)) ^ s(s(s(0))) 

The TRS is not terminating: /(s(s(s(0)))) /(o(s(0))) /(s(s(s(0)))) ^ .... However, 
the function / is terminating when applied to an even number, that is, the language T = 
{/(s2-'^(0)) I n G N}. We choose A = ({0, 1}, [ • 1, >) where [01 = 0, [sl(0) = 1, |s](l) = 0, 
|o](0) = 0, [o](l)f , [/](0) = and [[/l(l)t. Then ^ is a monotone partial model with 
T C C{A). We have |o(s(0)),a]| (for ah a), thus the rule o(s(0)) s(s(s(0))) is never 
applicable and can be removed. 



10. Conclusion and Future Work 

We have implemented some of the methods proposed in this paper. More information and 
the source code of the implementations can be found on the website: 

http : //infinity . f ew . vu . nl/local/ 

In particular, we have implemented the method from Section [71 The program automatically 
finds the minimal partial model A for the language of normalizing S-terms, and transforms 
the local termination problem into a global termination problem. We have formally verified 
the model property, and that all terms that are not in the language of A are non-terminating. 
Global termination of the transformed system has been proven by TTT2 (1.0) [KSZM09] 
and formally verified by CeTA (1.05) |TS09] . Thereby we have automated one of the central 
contributions of |Wal00| . 

We intend to generalize the characterization of local termination to context-sensitive 
rewriting [Luc98j . using //-monotonic, partial S-algebras; and also to top termination, using 
weakly extended, monotone, partial S-algebras [AGOOt lEWZOSj . 

Methods using transformations from certain properties, like liveness properties |Kop08| 
or outermost termination |RZ09j , to termination usually give rise to local termination prob- 
lems. That is, termination is of interest only for those terms which are in the image of the 
transformation. For example, we noted that the transformation in |RZ09j gives rise to a 
language which can be described by a partial model. Then it suffices to show complete- 
ness of the transformation to local termination, and employing Theorem 16.41 we obtain a 
complete transformation to global termination for free. 

Acknowledgements. We than Vincent van Oostrom and the anonymous referees for 
valuable suggestions for improving the presentation of the paper. 
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